SPAZIO SPIGA
M I L A N O
SPAZIO SPIGA · LEGAL INFORMATION
Privacy Policy
Last Updated: October 23rd, 2026
01. Introduction
At Spazio Spiga, we recognize the importance of protecting the privacy and personal data of our website visitors, clients, business partners and industry professionals.
This Privacy Policy explains how Spazio Spiga S.r.l. collects, processes, stores and protects personal data obtained through this website, our contact forms and related professional communications.
We are committed to processing personal data lawfully, fairly and transparently, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and applicable Italian data protection legislation.
This Privacy Policy applies to personal data processed in connection with the use of our website and the services and enquiries described below.
02. Data Controller
The Data Controller responsible for the processing of personal data through this website is:
SPAZIO SPIGA S.R.L.
Registered Office:
Via Panfilo Castaldi 29
20124 Milan (MI), Italy
VAT Number: IT14081590961
Showroom Address:
Via della Spiga 7
20121 Milan, Italy
Email: info@spaziospiga.com
For questions concerning this Privacy Policy, the processing of personal data or the exercise of data protection rights, individuals may contact Spazio Spiga S.r.l. using the email address indicated above.
03. Personal Data We Collect
Spazio Spiga S.r.l. may collect and process different categories of personal data depending on how visitors interact with our website.
Information Provided Through Contact Forms
When visitors submit an enquiry through our website, we may collect:
-
Full name
-
Company or brand name
-
Email address
-
Telephone number, where provided
-
Type of enquiry
-
Information included in the message
-
Any additional information voluntarily submitted
Professional and Commercial Communications
When individuals contact us by email or communicate with our team regarding professional activities, we may process their contact details, professional role, correspondence and information relevant to their enquiry.
Technical and Website Usage Data
During website navigation, technical information may be processed, including:
-
IP address
-
Browser type and version
-
Device and operating system information
-
Technical connection data
-
Security and access logs
-
Cookie identifiers and website usage information, where applicable
The precise categories of technical information depend on the website configuration and the services enabled.
Visitors are requested not to submit special categories of personal data, such as health information or other sensitive information, unless strictly necessary and specifically requested.
04. Purposes and Legal Bases for Processing
We process personal data only for specified, legitimate purposes and on an appropriate legal basis.
A. Responding to Enquiries
We use personal data to respond to requests concerning showroom appointments, brand partnerships, commercial services, collection presentations and professional events.
Legal basis: Article 6(1)(b) GDPR, where processing is necessary to take steps prior to entering into a contract at the individual's request, or Article 6(1)(f) GDPR, where our legitimate interest is to manage and respond to professional communications.
B. Managing Business Relationships
We may process personal data to arrange meetings, prepare commercial proposals, coordinate services, communicate with clients and manage existing business relationships.
Legal basis: Article 6(1)(b) GDPR, where applicable, or Article 6(1)(f) GDPR for the legitimate interest in organizing professional communications and maintaining business relationships.
C. Website Operation and Security
We process technical information as necessary to maintain website functionality, protect our systems, prevent misuse and ensure the security of our services.
Legal basis: Article 6(1)(f) GDPR, based on our legitimate interest in operating a secure and functional website, or Article 6(1)(c) GDPR where a legal obligation applies.
D. Legal and Administrative Obligations
Where required, personal data may be processed to comply with applicable legal, tax, accounting and regulatory obligations.
Legal basis: Article 6(1)(c) GDPR.
E. Analytics and Optional Technologies
Where optional analytics or similar technologies are enabled and require consent, the associated processing will take place only after the relevant consent has been obtained.
Legal basis: Article 6(1)(a) GDPR, where applicable, subject to the rules governing cookies and similar technologies.
F. Marketing Communications
Where Spazio Spiga offers newsletters, promotional communications or other marketing activities, personal data will be processed in accordance with the applicable legal requirements and, where necessary, on the basis of the individual's consent.
Submitting an enquiry through our contact form does not automatically result in subscription to promotional mailing lists.
05. How We Process and Protect Your Data
Personal data is processed through electronic systems and, where necessary, organizational procedures appropriate to the purposes for which the information was collected.
Spazio Spiga S.r.l. adopts technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.
Such measures may include access restrictions, authentication procedures, secure communication systems and the use of professional technology providers.
Personal data is accessible only to authorized personnel and service providers who require access for legitimate business purposes.
Despite the security measures adopted, no online transmission or electronic storage system can guarantee absolute security.
We periodically review our procedures and seek to maintain an appropriate level of protection in relation to the nature of the personal data processed.
06. Data Sharing and Service Providers
Spazio Spiga S.r.l. does not sell personal data.
Personal data may be disclosed or made accessible to authorized personnel and selected service providers where necessary for the purposes described in this Privacy Policy.
These may include:
Website Hosting and Management
Our website is operated through the Wix platform, which provides website hosting, technical infrastructure, online forms and related website management services.
Email and Communication Services
Professional email and communication service providers may process personal data to facilitate communication and the management of incoming enquiries.
Technical and Professional Service Providers
Where necessary, authorized technical consultants, IT service providers and other professional advisers may access information within the limits of their responsibilities.
Third-Party Website Services
Where enabled, services such as analytics platforms, embedded maps or other website integrations may process certain technical data.
Where required, service providers acting on our behalf are subject to appropriate contractual and data protection arrangements.
Personal data may also be disclosed to competent public authorities where required by applicable law.
07. International Data Transfers
Certain technology providers or their subprocessors may process personal data outside the European Economic Area (EEA).
Where personal data is transferred to a country outside the EEA, Spazio Spiga S.r.l. will ensure that the transfer is carried out in accordance with applicable data protection legislation.
Depending on the circumstances, appropriate transfer mechanisms may include:
-
An adequacy decision adopted by the European Commission;
-
Standard Contractual Clauses approved by the European Commission;
-
Other safeguards or lawful transfer mechanisms recognized under the GDPR.
Information about the transfer mechanisms and the means of obtaining copies of relevant safeguards may be requested by contacting info@spaziospiga.com.
08. Data Retention
Spazio Spiga S.r.l. retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal obligations.
General Enquiries and Commercial Requests
Personal data collected through our website contact form or related commercial correspondence that does not result in a contractual relationship will be retained for a maximum period of 24 months from the last meaningful interaction.
A meaningful interaction may include a new enquiry, a substantive reply, an appointment or relevant correspondence concerning the commercial request.
Routine administrative activities, automated messages or internal access to existing records do not, by themselves, restart the retention period.
Contractual and Business Relationships
Where an enquiry develops into a contractual or commercial relationship, relevant personal data will be retained for the duration of that relationship and subsequently for the period required by applicable legal, accounting, tax or regulatory obligations, or where necessary for the establishment, exercise or defence of legal claims.
Technical Data and Cookies
Technical logs, cookie information and similar data will be retained in accordance with the relevant processing purposes, technical settings and the retention periods associated with the services actually used.
Further details are provided in our Cookie Policy, where applicable.
Deletion and Review
When personal data is no longer necessary, we take appropriate steps to delete or anonymize it, unless its further retention is justified by a separate lawful purpose or legal obligation.
09. Your Data Protection Rights
Under the GDPR, individuals have the following rights, subject to the conditions and limitations established by applicable law:
Right of Access
To obtain confirmation of whether their personal data is being processed and, where applicable, access to that data.
Right to Rectification
To request correction of inaccurate personal data or completion of incomplete information.
Right to Erasure
To request deletion of personal data in the circumstances provided by law.
Right to Restriction
To request the restriction of processing in applicable circumstances.
Right to Object
To object to processing based on legitimate interests, subject to the applicable legal conditions.
Right to Data Portability
To receive personal data in a structured, commonly used and machine-readable format, where the relevant legal requirements apply.
Right to Withdraw Consent
Where processing is based on consent, individuals may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Right to Lodge a Complaint
Individuals may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority.
Requests to exercise these rights may be sent to:
Spazio Spiga S.r.l. will respond within the time limits established by applicable data protection law.
10. Cookies and Third-Party Technologies
Our website may use cookies and similar technologies to support essential functionality, website security, visitor preferences and, where configured, optional services.
Strictly necessary technologies may be used without prior consent where permitted by law.
Non-essential cookies and other technologies requiring consent will be activated only after the visitor has provided the appropriate authorization.
Visitors may manage or withdraw their consent through the cookie preferences interface available on the website.
Third-party services, such as analytics tools or embedded maps, may process technical information depending on the website configuration.
Detailed information about the technologies actually in use, including their providers, purposes and retention periods, is available in our separate Cookie Policy.
11. Provision of Personal Data
Providing personal data through our contact form is voluntary.
However, certain fields are necessary for us to receive, understand and respond to a request.
These mandatory fields may include:
-
Full name
-
Email address
-
Type of enquiry
-
Message
Other information, such as a telephone number or company name, may be provided voluntarily unless otherwise indicated in the form.
Failure to provide the required information may prevent us from responding to an enquiry or providing the requested service.
Providing personal data for the purpose of submitting a commercial enquiry does not require the individual to agree to receive promotional communications.
12. Automated Decision-Making and Profiling
Spazio Spiga S.r.l. does not use personal data collected through this website to carry out solely automated decision-making, including profiling, that produces legal effects concerning individuals or similarly significantly affects them, within the meaning of Article 22 GDPR.
Where automated tools are used for technical operation, security or the routing of enquiries, these do not, by themselves, constitute automated decision-making of the kind described above.
Where optional analytics or marketing technologies are enabled, information about their specific purposes and associated processing is provided in the relevant sections of this Privacy Policy and the Cookie Policy.
13. Changes to This Policy and Contact
Spazio Spiga S.r.l. may update this Privacy Policy from time to time to reflect changes in its services, website configuration, data processing activities or applicable legal requirements.
The updated version will be published on this page together with the date of its latest revision.
Visitors are encouraged to review this page periodically.
For any questions, information requests or concerns relating to the processing of personal data, please contact:
SPAZIO SPIGA S.R.L.
Registered Office:
Via Panfilo Castaldi 29
20124 Milan (MI), Italy
VAT Number: IT14081590961
Email: info@spaziospiga.com
Showroom:
Via della Spiga 7
20121 Milan, Italy